Privacy Policy
Last updated: 6 October 2026
Who is responsible for your data
The controller of your personal data is Raposo Consulting S.L. (CIF B09631359), with registered address at [Registered address], which operates Follist (“we”). You can contact us about privacy at any time at hello@follist.com.
What Follist does not access
Follist only works with information that is publicly visible on Instagram. We never ask for or use your Instagram password, cookies, private messages or logged-in session, and we cannot see private accounts.
Data we collect about you
- Account data: your email address, optional name, encrypted password, language and notification preferences.
- Usage data: the public Instagram usernames you add, the checks you run, the reports you create and your Signal balance and history.
- Billing data: your plan, payments and invoices. Card details are entered directly with our payment provider, Stripe; we never see or store your full card number.
- Support data: the messages you send us through the contact form or by email.
- Technical data: IP address, browser information and security logs, used to protect accounts and prevent abuse.
Public data about Instagram accounts
To compare following lists over time, Follist stores snapshots of the public list of accounts that a public Instagram profile follows: usernames, display names, profile pictures and the date each change was detected. We only process what Instagram shows publicly, we use it only to provide the comparisons requested by our customers, and we do not sell it or use it for advertising.
If you appear in this data and want to object to its processing or ask for it to be deleted, write to hello@follist.com and we will handle your request.
Why we use your data and on what legal basis
- To provide the service you signed up for (account, checks, reports, Signals, support): performance of our contract with you (art. 6.1.b GDPR).
- To charge for the service and keep accounting records: performance of the contract and compliance with our legal obligations (art. 6.1.b and 6.1.c GDPR).
- To keep Follist secure and prevent fraud and abuse, and to process public profile data for the comparisons: our legitimate interests, balanced against your rights (art. 6.1.f GDPR).
- Service emails (account confirmation, password reset, results of your checks, billing notices): performance of the contract. You can switch off non-essential notifications in Settings. We do not send marketing emails without your consent.
Who we share data with
We only share data with providers that help us run Follist, under contracts that oblige them to protect it and use it only on our instructions:
- Stripe — payment processing and invoicing.
- Data-collection providers (such as Apify) — to read public Instagram profiles and following lists when you run a check.
- Hosting and email providers — to run our servers and send service emails.
We do not sell personal data. We may disclose data when required by law or by a competent authority.
International transfers
Some providers may process data outside the European Economic Area. In those cases the transfer is protected by an adequacy decision of the European Commission or by the Commission’s Standard Contractual Clauses.
How long we keep data
- Account and usage data: while your account is active. When you delete your account, we delete your watchlist, reports and personal details.
- Billing records: for the period required by tax and commercial law (generally six years), with no other use.
- Snapshots of public following lists: while they are needed to provide comparisons, and deleted when no customer needs them any more.
- Security logs: up to 12 months.
Your rights
You can request access to your data, its rectification or deletion, the restriction of its processing, its portability, and object to processing based on legitimate interests. Write to hello@follist.com from the email address of your account. You can also delete your account yourself in Settings.
If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.
Cookies
Follist only uses cookies that are necessary for the site to work: a session cookie to keep you logged in and protect forms, and a cookie that remembers your language. When you pay, Stripe sets its own cookies to prevent fraud. We do not use advertising or analytics cookies, so we do not ask for cookie consent.
To know how many people visit the website, we count visits without cookies: we record the page, the referring website, the campaign tags of the link, the language and the type of device, together with an anonymous code made from your IP address and browser that changes every day. It cannot be used to identify you or to follow you from one day to the next.
Emails we send
We send you emails about your account, payments and security (for example, confirming your email, receipts or a failed renewal); these are part of the service. Notifications about your checks can be switched off in Settings. If you create an account and do not start a plan, we may send you a few reminders about Follist; every one of them has a link to unsubscribe in one click.
Security
Passwords are stored encrypted, all connections use HTTPS, and access to our systems is restricted. No system is completely secure, but we work to protect your data and will notify you and the authorities of any breach as required by law.
Minors
Follist is intended for people aged 18 or over. We do not knowingly collect data from minors.
Changes to this policy
If we make important changes, we will tell you by email or in your account before they apply. The date at the top shows the latest version.